CW8 — REST create and update: denied and unknown keys get the same refusal; an allowed update's response carries no denied value.
CW8 — REST create and update: denied and unknown keys get the same refusal; an allowed update's response carries no denied value.